Critical ELSA-2016-0695 5 CVEs

Critical: firefox security update (Oracle Linux 7)

Published Apr 26, 2016 · Updated Apr 26, 2016

Ecosystem: Oracle Linux

Summary

[45.1.0-1.0.1.el7_2]
- Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html
and remove the corresponding Red Hat files

[45.1.0-1]
- Update to 45.1.0 ESR

[45.0.2-1]
- Update to 45.0.2 ESR

[45.0.1-1]
- Update to 45.0.1 ESR

[45.0-5]
- Fixed crashed after start (rhbz#1323744, rhbz#1323738)

[45.0-4]
- Added system-level location for configuring Firefox (rhbz#1206239)

[45.0-3]
- Update to 45.0 ESR

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 7	firefox	0:45.1.0-1.0.1.el7_2

Vulnerabilities 5

Unscored —

CVE-2016-2805

Unspecified vulnerability in the browser engine in Mozilla Firefox ESR 38.x before 38.8 allows remote attackers to caus…

thunderbird Ubuntu

Apr 30, 2016
Unscored —

CVE-2016-2806

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0 and Firefox ESR 45.x before 4…

firefox firefox-esr Debian Ubuntu

Apr 30, 2016
Unscored —

CVE-2016-2807

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0, Firefox ESR 38.x before 38.8…

thunderbird firefox firefox-esr Debian Ubuntu

Apr 30, 2016
Unscored —

CVE-2016-2808

The watch implementation in the JavaScript engine in Mozilla Firefox before 46.0, Firefox ESR 38.x before 38.8, and Fir…

firefox firefox-esr Debian Ubuntu

Apr 30, 2016
Unscored —

CVE-2016-2814

Heap-based buffer overflow in the stagefright::SampleTable::parseSampleCencInfo function in libstagefright in Mozilla F…

firefox firefox-esr Debian Ubuntu

Apr 30, 2016